The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-122135: Inclusion of Functionality from Untrusted Control Sphere8.8 High8.6 High0%Nov 4, 2026
CVE-2026-122134: Inclusion of Functionality from Untrusted Control Sphere8.8 High8.6 High0%Nov 4, 2026
CVE-2026-122133: Uncontrolled Search Path Element8.8 High8.6 High0%Nov 4, 2026
CVE-2026-122132: URL Redirection to Untrusted Site6.1 Medium5.1 Medium0%Nov 4, 2026
CVE-2026-122131: Improperly Controlled Modification of Object Prototype Attributes3.7 Low6.3 Medium0%Nov 4, 2026
CVE-2026-122130: Integer Overflow or Wraparound8.2 High8.3 High0%Nov 4, 2026
CVE-2026-122129: Memory Allocation with Excessive Size Value5.3 Medium6.9 Medium0%Nov 4, 2026
CVE-2026-122127: Out-of-bounds Write7.5 High8.7 High0%Nov 4, 2026
CVE-2026-122126: Heap-based Buffer Overflow5.9 Medium8.2 High0%Nov 4, 2026
CVE-2026-122014: NPC-Worldwide npcpy: A vulnerability has been found in NPC-Worldwide npcpy up to 2.1.276.3 Medium2.1 Low0%Nov 4, 2026
CVE-2026-122013: Improper Limitation of a Pathname to a Restricted Directory10.0 Critical9.3 Critical1%Nov 4, 2026
CVE-2026-122009: Server-Side Request Forgery (SSRF)7.3 High5.5 Medium1%Nov 4, 2026
CVE-2026-121969: Stack-based Buffer Overflow6.5 Medium7.1 High0%Nov 4, 2026
CVE-2026-121968: Improper Validation of Array Index6.5 Medium7.1 High0%Nov 4, 2026
CVE-2026-11724: Improper Input Validation8.5 HighN/A0%Nov 4, 2026
CVE-2026-11376: Integer Overflow or Wraparound8.8 HighN/A0%Nov 4, 2026
CVE-2026-116376: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to conduct a phishing attack…3.4 LowN/A0%Nov 4, 2026
CVE-2026-115762: Improperly Controlled Modification of Object Prototype Attributes6.1 MediumN/A0%Nov 4, 2026
CVE-2026-115758: Improper Validation of Certificate with Host MismatchN/A8.2 High0%Nov 4, 2026
CVE-2026-110283: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to cause a denial of service…4.3 MediumN/A0%Nov 4, 2026
CVE-2026-110282: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security…6.5 MediumN/A0%Nov 4, 2026
CVE-2026-110281: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 improperly validates TLS certificate validation, which could allow an…5.9 MediumN/A0%Nov 4, 2026
CVE-2026-10859: Undefined Security Weakness7.5 HighN/A0%Nov 4, 2026
CVE-2026-108910: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to obtain sensitive…4.3 MediumN/A0%Nov 4, 2026
CVE-2026-108838: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a local attacker to cause a denial of service due to…3.3 LowN/A0%Nov 4, 2026
901-925 of 426070
‹›